# Vulnerabilities published in 2020


- [CVE-2020-3416](https://insights.sbomify.com/CVE-2020-3416/): Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities (medium 6.7)
- [CVE-2020-3415](https://insights.sbomify.com/CVE-2020-3415/): Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-3414](https://insights.sbomify.com/CVE-2020-3414/): Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3413](https://insights.sbomify.com/CVE-2020-3413/): Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability (medium 4.3)
- [CVE-2020-3412](https://insights.sbomify.com/CVE-2020-3412/): Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability (medium 4.3)
- [CVE-2020-3411](https://insights.sbomify.com/CVE-2020-3411/): Cisco DNA Center Information Disclosure Vulnerability (high 7.5)
- [CVE-2020-3410](https://insights.sbomify.com/CVE-2020-3410/): Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability (high 8.1)
- [CVE-2020-3409](https://insights.sbomify.com/CVE-2020-3409/): Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3408](https://insights.sbomify.com/CVE-2020-3408/): Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3407](https://insights.sbomify.com/CVE-2020-3407/): Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3406](https://insights.sbomify.com/CVE-2020-3406/): Cisco SD-WAN vManage Software Cross-Site Scripting Vulnerability (medium 6.4)
- [CVE-2020-3405](https://insights.sbomify.com/CVE-2020-3405/): Cisco SD-WAN vManage Software XML External Entity Vulnerability (medium 6.5)
- [CVE-2020-3404](https://insights.sbomify.com/CVE-2020-3404/): Cisco IOS XE Software Consent Token Bypass Vulnerability (medium 6.7)
- [CVE-2020-3403](https://insights.sbomify.com/CVE-2020-3403/): Cisco IOS XE Software Command Injection Vulnerability (medium 6.7)
- [CVE-2020-3402](https://insights.sbomify.com/CVE-2020-3402/): Cisco Unified Customer Voice Portal Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3401](https://insights.sbomify.com/CVE-2020-3401/): Cisco SD-WAN vManage Software Path Traversal Vulnerability (medium 6.5)
- [CVE-2020-3400](https://insights.sbomify.com/CVE-2020-3400/): Cisco IOS XE Software Web UI Authorization Bypass Vulnerability (high 8.8)
- [CVE-2020-3399](https://insights.sbomify.com/CVE-2020-3399/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3398](https://insights.sbomify.com/CVE-2020-3398/): Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3397](https://insights.sbomify.com/CVE-2020-3397/): Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3396](https://insights.sbomify.com/CVE-2020-3396/): Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability (medium 6.8)
- [CVE-2020-3394](https://insights.sbomify.com/CVE-2020-3394/): Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability (high 7.8)
- [CVE-2020-3393](https://insights.sbomify.com/CVE-2020-3393/): Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability (medium 6.0)
- [CVE-2020-3392](https://insights.sbomify.com/CVE-2020-3392/): Cisco IoT Field Network Director Missing API Authentication Vulnerability (high 7.5)
- [CVE-2020-3391](https://insights.sbomify.com/CVE-2020-3391/): Cisco Digital Network Architecture Center Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-3390](https://insights.sbomify.com/CVE-2020-3390/): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3389](https://insights.sbomify.com/CVE-2020-3389/): Cisco Hyperflex HX-Series Software Weak Storage Vulnerability (medium 4.4)
- [CVE-2020-3388](https://insights.sbomify.com/CVE-2020-3388/): Cisco SD-WAN vManage Software Command Injection Vulnerability (high 7.8)
- [CVE-2020-3387](https://insights.sbomify.com/CVE-2020-3387/): Cisco SD-WAN vManage Software Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-3386](https://insights.sbomify.com/CVE-2020-3386/): Cisco Data Center Network Manager Improper Authorization Vulnerability (high 8.8)
- [CVE-2020-3385](https://insights.sbomify.com/CVE-2020-3385/): Cisco SD-WAN vEdge Routers Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3384](https://insights.sbomify.com/CVE-2020-3384/): Cisco Data Center Network Manager Command Injection Vulnerability (high 8.2)
- [CVE-2020-3383](https://insights.sbomify.com/CVE-2020-3383/): Cisco Data Center Network Manager Path Traversal Vulnerability (high 8.8)
- [CVE-2020-3382](https://insights.sbomify.com/CVE-2020-3382/): Cisco Data Center Network Manager Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2020-3381](https://insights.sbomify.com/CVE-2020-3381/): Cisco SD-WAN vManage Software Directory Traversal Vulnerability (high 8.8)
- [CVE-2020-3380](https://insights.sbomify.com/CVE-2020-3380/): Cisco Data Center Network Manager Privilege Escalation Vulnerability (high 7.8)
- [CVE-2020-3379](https://insights.sbomify.com/CVE-2020-3379/): Cisco SD-WAN Solution Software Privilege Escalation Vulnerability (medium 5.3)
- [CVE-2020-3378](https://insights.sbomify.com/CVE-2020-3378/): Cisco SD-WAN vManage Software SQL Injection Vulnerability (medium 4.3)
- [CVE-2020-3377](https://insights.sbomify.com/CVE-2020-3377/): Cisco Data Center Network Manager Command Injection Vulnerability (medium 6.3)
- [CVE-2020-3376](https://insights.sbomify.com/CVE-2020-3376/): Cisco Data Center Network Manager Authentication Bypass Vulnerability (high 7.3)
- [CVE-2020-3375](https://insights.sbomify.com/CVE-2020-3375/): Cisco SD-WAN Solution Software Buffer Overflow Vulnerability (critical 9.8)
- [CVE-2020-3374](https://insights.sbomify.com/CVE-2020-3374/): Cisco SD-WAN vManage Software Authorization Bypass Vulnerability (critical 9.9)
- [CVE-2020-3373](https://insights.sbomify.com/CVE-2020-3373/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability (high 8.6)
- [CVE-2020-3372](https://insights.sbomify.com/CVE-2020-3372/): Cisco SD-WAN vManage Software Denial of Service Vulnerability (medium 6.5)
- [CVE-2020-3371](https://insights.sbomify.com/CVE-2020-3371/): Cisco Integrated Management Controller Command Injection Vulnerability (medium 6.3)
- [CVE-2020-3370](https://insights.sbomify.com/CVE-2020-3370/): Cisco Content Security Management Appliance Filter Bypass Vulnerability (medium 4.0)
- [CVE-2020-3369](https://insights.sbomify.com/CVE-2020-3369/): Cisco SD-WAN vEdge Routers Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3368](https://insights.sbomify.com/CVE-2020-3368/): Cisco Email Security Appliance URL Filtering Bypass Vulnerability (medium 5.8)
- [CVE-2020-3367](https://insights.sbomify.com/CVE-2020-3367/): Cisco Secure Web Appliance Privilege Escalation Vulnerability (medium 5.3)
- [CVE-2020-3365](https://insights.sbomify.com/CVE-2020-3365/): Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability (medium 4.3)
- [CVE-2020-3364](https://insights.sbomify.com/CVE-2020-3364/): Security feature bypass in Cisco IOS XR Software (medium 5.3)
- [CVE-2020-3363](https://insights.sbomify.com/CVE-2020-3363/): Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3362](https://insights.sbomify.com/CVE-2020-3362/): Cisco Network Services Orchestrator Information Disclosure Vulnerability (medium 4.7)
- [CVE-2020-3361](https://insights.sbomify.com/CVE-2020-3361/): Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability (high 8.1)
- [CVE-2020-3360](https://insights.sbomify.com/CVE-2020-3360/): Cisco IP Phones Series 7800 and Series 8800 Call Log Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-3359](https://insights.sbomify.com/CVE-2020-3359/): Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3358](https://insights.sbomify.com/CVE-2020-3358/): Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3357](https://insights.sbomify.com/CVE-2020-3357/): Other in Cisco Small Business RV Series Router Firmware (critical 9.8)
- [CVE-2020-3356](https://insights.sbomify.com/CVE-2020-3356/): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3355](https://insights.sbomify.com/CVE-2020-3355/): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3354](https://insights.sbomify.com/CVE-2020-3354/): Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2020-3353](https://insights.sbomify.com/CVE-2020-3353/): Cisco Identity Services Engine Denial of Service Vulnerability (medium 5.9)
- [CVE-2020-3352](https://insights.sbomify.com/CVE-2020-3352/): Cisco Firepower Threat Defense Software Hidden Commands Vulnerability (medium 5.3)
- [CVE-2020-3351](https://insights.sbomify.com/CVE-2020-3351/): Cisco SD-WAN Solution Software Denial of Service Vulnerability (high 8.6)
- [CVE-2020-3350](https://insights.sbomify.com/CVE-2020-3350/): Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability (medium 5.5)
- [CVE-2020-3349](https://insights.sbomify.com/CVE-2020-3349/): Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2020-3348](https://insights.sbomify.com/CVE-2020-3348/): Cisco Data Center Network Manager Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2020-3347](https://insights.sbomify.com/CVE-2020-3347/): Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-3346](https://insights.sbomify.com/CVE-2020-3346/): Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2020-3345](https://insights.sbomify.com/CVE-2020-3345/): Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability (medium 4.3)
- [CVE-2020-3344](https://insights.sbomify.com/CVE-2020-3344/): Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability (medium 5.5)
- [CVE-2020-3343](https://insights.sbomify.com/CVE-2020-3343/): Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability (medium 5.5)
- [CVE-2020-3342](https://insights.sbomify.com/CVE-2020-3342/): Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability (high 8.8)
- [CVE-2020-3341](https://insights.sbomify.com/CVE-2020-3341/): ClamAV PDF Parsing Denial of Service Vulnerability (high 7.5)
- [CVE-2020-3340](https://insights.sbomify.com/CVE-2020-3340/): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities (medium 4.8)
- [CVE-2020-3339](https://insights.sbomify.com/CVE-2020-3339/): Cisco Prime Infrastructure SQL Injection Vulnerability (medium 5.4)
- [CVE-2020-3338](https://insights.sbomify.com/CVE-2020-3338/): Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability (high 7.5)
- [CVE-2020-3337](https://insights.sbomify.com/CVE-2020-3337/): Cisco Umbrella Open Redirect Vulnerability (medium 4.7)
- [CVE-2020-3336](https://insights.sbomify.com/CVE-2020-3336/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability (high 7.2)
- [CVE-2020-3335](https://insights.sbomify.com/CVE-2020-3335/): Cisco Application Services Engine Software Authorization Vulnerability (medium 5.5)
- [CVE-2020-3334](https://insights.sbomify.com/CVE-2020-3334/): Cisco Firepower 2100 Series Security Appliances ARP Denial of Service Vulnerability (high 7.4)
- [CVE-2020-3333](https://insights.sbomify.com/CVE-2020-3333/): Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability (medium 5.3)
- [CVE-2020-3332](https://insights.sbomify.com/CVE-2020-3332/): Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability (high 8.1)
- [CVE-2020-3331](https://insights.sbomify.com/CVE-2020-3331/): Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability (critical 9.8)
- [CVE-2020-3330](https://insights.sbomify.com/CVE-2020-3330/): Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability (critical 9.8)
- [CVE-2020-3329](https://insights.sbomify.com/CVE-2020-3329/): Missing authorization in Cisco UCS Director (medium 4.3)
- [CVE-2020-3327](https://insights.sbomify.com/CVE-2020-3327/): ClamAV ARJ Archive Parsing Denial of Service Vulnerability (high 7.5)
- [CVE-2020-3323](https://insights.sbomify.com/CVE-2020-3323/): Memory corruption in Cisco Small Business RV Series Router Firmware (critical 9.8)
- [CVE-2020-3322](https://insights.sbomify.com/CVE-2020-3322/): Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability (low 3.3)
- [CVE-2020-3321](https://insights.sbomify.com/CVE-2020-3321/): Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability (low 3.3)
- [CVE-2020-3320](https://insights.sbomify.com/CVE-2020-3320/): Cisco Firepower Management Center Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2020-3319](https://insights.sbomify.com/CVE-2020-3319/): Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability (low 3.3)
- [CVE-2020-3318](https://insights.sbomify.com/CVE-2020-3318/): Cisco Firepower Management Center Static Credential Vulnerabilities (high 8.1)
- [CVE-2020-3317](https://insights.sbomify.com/CVE-2020-3317/): Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability (medium 5.8)
- [CVE-2020-3315](https://insights.sbomify.com/CVE-2020-3315/): Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability (medium 5.8)
- [CVE-2020-3314](https://insights.sbomify.com/CVE-2020-3314/): Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability (medium 6.1)
- [CVE-2020-3313](https://insights.sbomify.com/CVE-2020-3313/): Cisco Firepower Management Center Cross-Site Scripting Vulnerability (medium 6.5)
- [CVE-2020-3312](https://insights.sbomify.com/CVE-2020-3312/): Cisco Firepower Threat Defense Software Information Disclosure Vulnerability (medium 5.8)
- [CVE-2020-3311](https://insights.sbomify.com/CVE-2020-3311/): Cisco Firepower Management Center Open Redirect Vulnerability (medium 4.3)
- [CVE-2020-3310](https://insights.sbomify.com/CVE-2020-3310/): Cisco Firepower Device Manager On-Box Software XML Parsing Vulnerability (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/86/